Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: lPn2SYQbSodH0JIAK3Fr1GE7CKeX/LoW1gXGVgi8lyY=
Subject key identifier: 06:2D:09:00:84:4F:49:D9:1A:7D:DA:70:E2:DC:FB:6A:25:97:BA:6A
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 018F4F4A5B48A34F70DF4B038DF6C7B1925E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 1157
Signing time: Mon 06 May 2024 19:03:44 +0000
Manifest this update: Mon 06 May 2024 19:03:44 +0000
Manifest next update: Tue 07 May 2024 19:03:44 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: NMHWaO48DuwufKrhj5MDZgiOz0WIyj42kCShh5CPgOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 19:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:4a:5b:48:a3:4f:70:df:4b:03:8d:f6:c7:b1:92:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: May 6 19:03:44 2024 GMT
Not After : May 7 19:03:44 2024 GMT
Subject: CN=062d0900844f49d91a7dda70e2dcfb6a2597ba6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:2c:76:bb:70:d3:ce:58:a5:f9:f8:a5:89:
c0:5a:49:4f:91:a4:10:e9:54:3f:f4:dd:68:f5:27:
37:9b:12:89:1c:80:45:89:bb:83:8d:52:f3:ca:28:
6a:4e:49:5f:88:e9:52:ad:09:96:6c:d2:75:bd:45:
e6:fa:cd:0b:20:fc:71:10:5d:98:45:73:30:ab:eb:
d8:2b:e1:d3:69:21:ac:df:fb:ab:07:5d:99:87:26:
27:06:af:67:93:99:5b:0b:f9:24:86:34:83:03:5e:
18:8c:74:33:33:67:fe:41:ed:28:17:06:a3:2e:13:
5a:15:03:a9:04:65:20:3e:b2:b7:b2:30:cc:51:0b:
c9:05:c2:22:45:bf:9b:8a:4e:4f:2f:c9:bc:b0:98:
06:71:29:6d:9a:e9:ba:32:94:1f:45:bf:85:2a:d1:
8b:2b:53:8d:06:db:a4:e9:df:0c:18:8d:dc:6d:90:
b7:29:4a:e2:f9:11:b2:8e:cc:9c:e7:98:b1:31:06:
c3:53:02:92:8d:bf:56:c6:5e:3e:13:8a:93:b5:70:
19:e1:ab:58:61:ea:a6:53:2e:52:d8:2e:2d:7a:a3:
24:d0:73:fa:5c:e8:ac:12:2c:bc:15:88:1a:f1:7a:
c4:a7:4e:a3:5a:39:e4:0f:d9:31:c3:69:33:2e:82:
9a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:09:00:84:4F:49:D9:1A:7D:DA:70:E2:DC:FB:6A:25:97:BA:6A
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:db:0c:3b:72:c3:13:99:79:8c:f1:8a:be:cc:85:71:8a:
76:ec:7b:9b:6a:95:fd:ea:d9:4e:91:27:01:58:83:b8:02:f9:
6e:84:10:c9:24:4b:22:f8:cc:7d:24:bd:39:e1:64:f3:bd:ea:
e7:25:0a:0c:b4:de:62:2d:32:ef:bf:27:00:1f:43:a4:f3:00:
5c:be:b3:fa:82:e6:67:c9:cc:02:31:85:55:cf:0a:8c:b4:8f:
ad:89:53:95:45:26:06:74:9a:12:0b:fd:d0:88:83:2d:01:2a:
43:19:1e:87:bd:a6:40:40:ce:0a:ed:86:c3:f3:c6:a5:cd:59:
af:1a:09:6e:d1:47:42:ae:f3:98:70:fb:5c:68:22:c5:26:e6:
89:ca:f2:0c:72:17:50:55:a5:8c:a9:2c:20:3d:d9:6c:0c:f6:
e3:22:5b:e1:1f:2d:92:9d:ac:0c:7a:49:cd:a5:76:30:17:24:
59:06:ae:82:50:b1:4c:07:10:78:18:6f:e4:ea:a2:ac:0b:13:
ee:65:a1:3d:73:30:86:79:64:16:16:e1:1a:11:73:22:08:c9:
8c:d8:29:54:5d:23:6b:71:99:7b:b5:a2:69:18:a7:cf:21:ec:
1c:2c:cd:08:eb:3e:e5:91:44:f0:ad:54:90:67:99:7b:52:44:
b3:05:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:08:14 2024 by rpki-client on console-ams.rpki-client.org